skill-douyin-upload

SUSPICIOUS: The skill is broadly coherent with its stated Douyin publishing purpose and routes activity to official Douyin endpoints, so it does not look like credential-harvesting malware. However, it automates public posting, persists authenticated browser state, handles SMS codes, and explicitly uses anti-detection measures; this makes it a medium-risk automation skill rather than a benign documentation/helper skill.